github stonith404/pocket-id v0.13.1

18 hours ago

Caution

UPDATE STRONGLY RECOMMENDED: This release fixes a critical bug introduced in v0.12.0 which didn't handle the request abortion correctly in middlewares. This means that the rate limited can be bypassed and all users can be listed without authentication. There is no need to change any passkeys or rotate OIDC secrets as they weren't exposed.

Bug Fixes

  • errors in middleware do not abort the request (376d747)
  • typo in Self-Account Editing description (5b9f4d7)
  • add list empty indicator (becfc00)

Don't miss a new pocket-id release

NewReleases is sending notifications on new releases.